TWIN DISC INC

The Company’s Board of Directors is responsible for exercising oversight of management’s identification and management, and planning for, risks from cybersecurity threats.

The Company has developed and is continuing to develop processes, that seek to assess, identify, and manage material risks from cybersecurity threats to the information technology systems and information it uses or will use, transmit, receive, and maintain. The processes for assessing, identifying, and managing material risks for cybersecurity threats include the Company’s efforts to identify the relevant assets that could be affected, determine possible threat sources and threat events, assess threats based on their potential likelihood and impact, and identify controls that are in place or necessary to manage and/or mitigate such risks.

The Company has not experienced any material cybersecurity incidents, and the expenses incurred from any security incidents have been immaterial. However, as discussed under “Risk Factors” in Part I, Item 1A of this Annual Report, cybersecurity threats pose multiple and potentially material risks to the Company, including potentially to the Company’s results of operations and financial condition. The Company relies extensively on information technology systems and could face cybersecurity risk. As cybersecurity threats become more frequent, sophisticated, and coordinated, it is reasonably likely that the Company may expend greater resources to continue to modify and enhance protective measures against such security risks.